72625 matches found
CVE-2026-52835 Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_database
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the importconfig handler and the databasefile branch of importdatabase in plexpy/webserve.py join the attacker-controlled configfile.filename or databasefile.filename directly to CACHEDIR without...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-urllib3: python3-urllib3+brotli-2.8.0-1.hum1 noarch python3-urllib3+h2-2.8.0-1.hum1 noarch python3-urllib3+socks-2.8.0-1.hum1 noarch python3-urllib3+zstd-2.8.0-1.hum1 noarch...
SUSE CVE-2026-77528
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce that limit against the compressed frame length before inflation but do not recheck the...
airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +12 more potentially affected by CVE-2026-82355 via apache-airflow-core (>=3.3.0, <=3.3.1)
apache-airflow-core PYPI version =3.3.0, =0.5.0, =3.3.0, =1.3.0, =14.3.6rc1, =7.5.0rc1, =2.0.5, =1.6.23, =2.1.1, =1.11.1rc1, =1.44.1rc1, =0.2.0rc1, =1.34.6, =5.7.28, =5.9.2 Source cves: CVE-2026-82355 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-20044951...
K000163359: Python vulnerability CVE-2026-30922
Security Advisory Description pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containi...
acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), airflow-add-ons (0.2.9b2) +8 more potentially affected by CVE-2026-75158 via apache-airflow (2.2.5)
apache-airflow PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.8.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.5.2, =0.8.3a1, =0.2.35, =0.2.37 Source cves:...
OPENSUSE-SU-2026:21928-1 Security update for python-weasyprint
This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-55073: Server-Side Request Forgery SSRF bsc1279942...
Rhacker
🔴 Rhacker Autonomous Penetration Testing Agent !Python...
USN-8787-1: libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...
USN-8787-1 libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...
ROOT-APP-PYPI-CVE-2026-84382 CVE-2026-84382 in httpx2 - Patched by Root
Root has patched CVE-2026-84382 in the httpx2 package for Root:PyPI. Multiple fixed versions available...
CVE-2026-64830 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...
CVE-2026-64831 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal...
CVE-2026-64832 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal...
CVE-2026-64833 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...
CVE-2026-65704 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...
CVE-2026-66037 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...
CVE-2026-66038 vulnerabilities
Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...